it seems like #532852 (Please run console-setup during initrd phase)
would also affect systems with a crypted root.
that is, entering the passphrase to unlock the block device backing the
root filesystem could be done with the machine's "preferred" keymap,
instead of with whatever default appears.
--dkg